Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
100
security advisoryimportantmemory issueSUSE: 2025:0521-2 critical: python312 cache and resource concerns
* bsc#1228165 * bsc#1234290 * bsc#1236705 Cross-References: . # Security update for python312 Announcement ID: SUSE-SU-2025:0521-1 Release Date: 2025-02-13T16:11:53Z Rating: important References: * bsc#1228165 * bsc#1234290 * bsc#1236705 Cross-References: * CVE-2024-12254 * CVE-2025-0938 CVSS scores: * CVE-2024-12254 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-12254 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-12254 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-12254 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-0938 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N * CVE-2025-0938 ( SUSE ): 4.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N * CVE-2025-0938 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.6 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities and has one security fix can now be installed. ## Description: This update for python312 fixes the following issues: * CVE-2025-0938: Functions `urllib.parse.urlsplit` and `urlparse` accept domain names including square brackets (bsc#1236705). * CVE-2024-12254: Unbounded memory buffering in SelectorSocketTransport.writelines() (bsc#1234290). Other bugfixes: * Position of SUSE Python interpreters on Externally managed environments (bsc#1228165). ##Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-521=1 openSUSE-SLE-15.6-2025-521=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2025-521=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libpython3_12-1_0-debuginfo-3.12.9-150600.3.18.1 * python312-tk-3.12.9-150600.3.18.1 * python312-curses-3.12.9-150600.3.18.1 * python312-debugsource-3.12.9-150600.3.18.1 * python312-idle-3.12.9-150600.3.18.1 * python312-base-3.12.9-150600.3.18.1 * python312-doc-devhelp-3.12.9-150600.3.18.1 * python312-tk-debuginfo-3.12.9-150600.3.18.1 * python312-debuginfo-3.12.9-150600.3.18.1 * libpython3_12-1_0-3.12.9-150600.3.18.1 * python312-base-debuginfo-3.12.9-150600.3.18.1 * python312-testsuite-3.12.9-150600.3.18.1 * python312-testsuite-debuginfo-3.12.9-150600.3.18.1 * python312-dbm-3.12.9-150600.3.18.1 * python312-curses-debuginfo-3.12.9-150600.3.18.1 * python312-doc-3.12.9-150600.3.18.1 * python312-3.12.9-150600.3.18.1 * python312-devel-3.12.9-150600.3.18.1 * python312-dbm-debuginfo-3.12.9-150600.3.18.1 * python312-core-debugsource-3.12.9-150600.3.18.1 * python312-tools-3.12.9-150600.3.18.1 * openSUSE Leap 15.6 (x86_64) * python312-32bit-3.12.9-150600.3.18.1 * python312-base-32bit-3.12.9-150600.3.18.1 * libpython3_12-1_0-32bit-debuginfo-3.12.9-150600.3.18.1 * python312-base-32bit-debuginfo-3.12.9-150600.3.18.1 * libpython3_12-1_0-32bit-3.12.9-150600.3.18.1 * python312-32bit-debuginfo-3.12.9-150600.3.18.1 * openSUSE Leap 15.6 (aarch64_ilp32) * python312-base-64bit-debuginfo-3.12.9-150600.3.18.1 * libpython3_12-1_0-64bit-debuginfo-3.12.9-150600.3.18.1 * python312-64bit-3.12.9-150600.3.18.1 *libpython3_12-1_0-64bit-3.12.9-150600.3.18.1 * python312-64bit-debuginfo-3.12.9-150600.3.18.1 * python312-base-64bit-3.12.9-150600.3.18.1 * Python 3 Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libpython3_12-1_0-debuginfo-3.12.9-150600.3.18.1 * python312-3.12.9-150600.3.18.1 * python312-devel-3.12.9-150600.3.18.1 * python312-idle-3.12.9-150600.3.18.1 * python312-dbm-debuginfo-3.12.9-150600.3.18.1 * python312-curses-3.12.9-150600.3.18.1 * python312-tk-3.12.9-150600.3.18.1 * python312-tk-debuginfo-3.12.9-150600.3.18.1 * python312-debugsource-3.12.9-150600.3.18.1 * libpython3_12-1_0-3.12.9-150600.3.18.1 * python312-base-debuginfo-3.12.9-150600.3.18.1 * python312-base-3.12.9-150600.3.18.1 * python312-debuginfo-3.12.9-150600.3.18.1 * python312-core-debugsource-3.12.9-150600.3.18.1 * python312-tools-3.12.9-150600.3.18.1 * python312-dbm-3.12.9-150600.3.18.1 * python312-curses-debuginfo-3.12.9-150600.3.18.1 ## References: * https://www.suse.com/security/cve/CVE-2024-12254.html * https://www.suse.com/security/cve/CVE-2025-0938.html * https://bugzilla.suse.com/show_bug.cgi?id=1228165 * https://bugzilla.suse.com/show_bug.cgi?id=1234290 * https://bugzilla.suse.com/show_bug.cgi?id=1236705 . Essential Python 3.12 update for SUSE addresses two significant vulnerabilities regarding memory overflow and DNS processing.. python312 update,SUSE security advisory,buffer overflow,domain name issue. . Severity: Important. LinuxSecurity.com Team
Feb 13, 2025
•Important
SuSE
89
security advisoryFedoramemory bufferFedora 41: 2024-54aa5fc4b2 Critical: python3.14 Memory Buffer Issue
Security fix for CVE-2024-12254. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-54aa5fc4b2 2024-12-19 04:06:20.748238+00:00 -------------------------------------------------------------------------------- Name : python3.14 Product : Fedora 41 Version : 3.14.0~a2 Release : 2.fc41 URL : https://www.python.org/ Summary : Version 3.14 of the Python interpreter Description : Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.14 package provides the "python3.14" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.14-libs package, which should be installed automatically along with python3.14. The remaining parts of the Python standard library are broken out into the python3.14-tkinter and python3.14-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.14-docs package. Packages containing additional libraries for Python are generally named with the "python3.14-" prefix. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2024-12254 -------------------------------------------------------------------------------- ChangeLog: * Sun Dec 8 2024 Charalampos Stratakis - 3.14.0~a2-2 - Security fix for CVE-2024-12254 - Fixes: rhbz#2330928 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2330928 - CVE-2024-12254 python3.14: Unbounded memory buffering in SelectorSocketTransport.writelines() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2330928 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-54aa5fc4b2' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Dec 19, 2024
•Critical
Fedora
98
security advisorysecurity updatered hatRedHat: RHSA-2020-0898-01 Important: Python-Imaging Memory Buffer Issue
An update for python-imaging is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: python-imaging security update Advisory ID: RHSA-2020:0898-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:0898 Issue date: 2020-03-18 CVE Names: CVE-2020-5312 ==================================================================== 1. Summary: An update for python-imaging is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64 3. Description: The Python Imaging Library (PIL) adds image processing capabilities to your Python interpreter. This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. Security Fix(es): * python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c (CVE-2020-5312) For more details about the security issue(s), including the impact, a CVSS score,acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1789533 - CVE-2020-5312 python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c 6. Package List: Red Hat Enterprise Linux Desktop (v. 6): Source: python-imaging-1.1.6-20.el6_10.src.rpm i386: python-imaging-1.1.6-20.el6_10.i686.rpm python-imaging-debuginfo-1.1.6-20.el6_10.i686.rpm x86_64: python-imaging-1.1.6-20.el6_10.x86_64.rpm python-imaging-debuginfo-1.1.6-20.el6_10.x86_64.rpm Red Hat Enterprise Linux Desktop Optional (v. 6): i386: python-imaging-debuginfo-1.1.6-20.el6_10.i686.rpm python-imaging-devel-1.1.6-20.el6_10.i686.rpm python-imaging-sane-1.1.6-20.el6_10.i686.rpm python-imaging-tk-1.1.6-20.el6_10.i686.rpm x86_64: python-imaging-debuginfo-1.1.6-20.el6_10.x86_64.rpm python-imaging-devel-1.1.6-20.el6_10.x86_64.rpm python-imaging-sane-1.1.6-20.el6_10.x86_64.rpm python-imaging-tk-1.1.6-20.el6_10.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional (v. 6): Source: python-imaging-1.1.6-20.el6_10.src.rpm x86_64: python-imaging-1.1.6-20.el6_10.x86_64.rpm python-imaging-debuginfo-1.1.6-20.el6_10.x86_64.rpm python-imaging-devel-1.1.6-20.el6_10.x86_64.rpm python-imaging-sane-1.1.6-20.el6_10.x86_64.rpm python-imaging-tk-1.1.6-20.el6_10.x86_64.rpm Red Hat Enterprise Linux Server (v. 6): Source: python-imaging-1.1.6-20.el6_10.src.rpm i386: python-imaging-1.1.6-20.el6_10.i686.rpm python-imaging-debuginfo-1.1.6-20.el6_10.i686.rpm ppc64: python-imaging-1.1.6-20.el6_10.ppc64.rpm python-imaging-debuginfo-1.1.6-20.el6_10.ppc64.rpm x86_64: python-imaging-1.1.6-20.el6_10.x86_64.rpm python-imaging-debuginfo-1.1.6-20.el6_10.x86_64.rpm Red Hat Enterprise Linux Server Optional (v.6): Source: python-imaging-1.1.6-20.el6_10.src.rpm i386: python-imaging-debuginfo-1.1.6-20.el6_10.i686.rpm python-imaging-devel-1.1.6-20.el6_10.i686.rpm python-imaging-sane-1.1.6-20.el6_10.i686.rpm python-imaging-tk-1.1.6-20.el6_10.i686.rpm ppc64: python-imaging-debuginfo-1.1.6-20.el6_10.ppc64.rpm python-imaging-devel-1.1.6-20.el6_10.ppc64.rpm python-imaging-sane-1.1.6-20.el6_10.ppc64.rpm python-imaging-tk-1.1.6-20.el6_10.ppc64.rpm s390x: python-imaging-1.1.6-20.el6_10.s390x.rpm python-imaging-debuginfo-1.1.6-20.el6_10.s390x.rpm python-imaging-devel-1.1.6-20.el6_10.s390x.rpm python-imaging-tk-1.1.6-20.el6_10.s390x.rpm x86_64: python-imaging-debuginfo-1.1.6-20.el6_10.x86_64.rpm python-imaging-devel-1.1.6-20.el6_10.x86_64.rpm python-imaging-sane-1.1.6-20.el6_10.x86_64.rpm python-imaging-tk-1.1.6-20.el6_10.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: python-imaging-1.1.6-20.el6_10.src.rpm i386: python-imaging-1.1.6-20.el6_10.i686.rpm python-imaging-debuginfo-1.1.6-20.el6_10.i686.rpm x86_64: python-imaging-1.1.6-20.el6_10.x86_64.rpm python-imaging-debuginfo-1.1.6-20.el6_10.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 6): i386: python-imaging-debuginfo-1.1.6-20.el6_10.i686.rpm python-imaging-devel-1.1.6-20.el6_10.i686.rpm python-imaging-sane-1.1.6-20.el6_10.i686.rpm python-imaging-tk-1.1.6-20.el6_10.i686.rpm x86_64: python-imaging-debuginfo-1.1.6-20.el6_10.x86_64.rpm python-imaging-devel-1.1.6-20.el6_10.x86_64.rpm python-imaging-sane-1.1.6-20.el6_10.x86_64.rpm python-imaging-tk-1.1.6-20.el6_10.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2020-5312 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGINPGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXnJPXtzjgjWX9erEAQhZlg//SxmLbb+EQEkSyOACUmPLgq9mUPOG5bKt hkAqtoyGZBzFsTyBHNQc0HGJJcHO+Moqkl5ad3lymjGeZ7LwNnnpD/1w6nMoCmqG EK2AcEx2PnPEnI7PwnVIa1dY7iU/LvvP0p9KOBDPIaNNiacgI4TgB+bFQc+VzThJ FuXqjcLv/cDL2GJzFz7Os6TBbL4gGcVOMBaXdAgWeNLSELCET80/Wam0pnWJnWyQ ATOGsvBsuOqhgT9WPA4IQblmH0K3v/NGMjNDohgaElas4CENJSmv+a5VkyNA8JXN ufkYMEIF970vgyEkFVc4HXfuehcSK9AF6MV0r6RITXD1n/QuSmzegq/++Ae5fRS5 TxrgFwuGJ9cUfY/+qnzNfCOti1rPjdWSkqhc69ps23wMN8zRaVoHAK4xbHcKBCcg ovk5pC7snKzA8V6PE3h6fjLxVy1F2vuu+AGzuhsfzc+qu1FNBKXOWo4rcCl/4jqS 733D/bK1Ld5zkeDe65llecuUBaJO9NNAaqZ/6doj1ZVVXrSSfAXWw8c91cc127ex gUhxyeFn1c2mlu9CKVJI1cNu3qyx5f1MaNTZU0SDSVvSfcFunjcMdXrDlYW0gZSx ccOUh/zHjKxRCehgVGxrY8MKtbv/VoLtq9RwPcWije81abz3o2n7PJtMiaG+VPxF 8O9JYJnrK5I=QJDA -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Mar 18, 2020
•Important
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!